Improve bug reporting documentation, and mention pspp-security list.

[pspp] / README

diff --git a/README b/README
index 1e95af1e902c5d96a55f5717c44d6e51fc9d9c9d..5e7d6a7e1604cacc41fa0300c9c0fb19dd6566c9 100644 (file)
--- a/README
+++ b/README
@@ -35,6 +35,12 @@ or emailed to bug-gnu-pspp@gnu.org.  We prefer the web-based system
 because it makes it more difficult for us to lose track of bugs, but we
 are happy to hear from users through any means.
 
 because it makes it more difficult for us to lose track of bugs, but we
 are happy to hear from users through any means.
 

+The PSPP bug tracker and bug reporting mailing list are public.  To
+privately report a security vulnerability in GNU PSPP, please send
+your report to the closed mailing list pspp-security@gnu.org.  The
+PSPP developers will help you assess your report and fix problems
+prior to public disclosure.
+

 The long term goals for PSPP are ambitious.  We wish to provide the
 following support to users:
 
 The long term goals for PSPP are ambitious.  We wish to provide the
 following support to users: